Class familyElastic · Kibana
Elastic Kibana code injection flaws, 2019–2023
6 Kibana CVEs with CWE-94 weaknesses, 25 Mar 2019 to 4 May 2023. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
2 2019’19
2 2020’20
2021’21
2022’22
2 2023’23
In CISA KEVNot in KEV
20192 CVEs, 1 in KEV
20202 CVEs
20232 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2019-7609KEV | 25 Mar 2019 | Kibana Arbitrary Code Execution | Grouped by weakness | 73.8 |
| CVE-2019-7610 | 25 Mar 2019 | Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger | Grouped by weakness | 18.0 |
| CVE-2020-7012 | 3 Jun 2020 | Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant | Grouped by weakness | 24.4 |
| CVE-2020-7013 | 3 Jun 2020 | Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB | Grouped by weakness | 16.4 |
| CVE-2023-31414 | 4 May 2023 | Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw | Grouped by weakness | 15.5 |
| CVE-2023-31415 | 4 May 2023 | Kibana version 8.7.0 contains an arbitrary code execution flaw | Grouped by weakness | 19.2 |